Privacy Policy
Last updated: 13 October 2026 · Version 1.2 · Applies to the website, the PerfDeck web app, PerfDeck Link and our Discord server and bot.
1. Controller
[COMPANY NAME], [Street, ZIP City, Country], email support@example.com is the controller of your personal data under Regulation (EU) 2016/679 (GDPR).
2. What data we process, why and on which legal basis
| Purpose | Data | Legal basis (Art. 6 GDPR) | Retention |
|---|---|---|---|
| Account | Discord user ID and display name (received from Discord when you sign in or use our bot; we never see your Discord password), role, date of acceptance of the Terms | Contract (b) | Until you delete your account; then up to 30 days in backups |
| PerfDeck settings | SimBrief pilot ID or username and the standard (STD) values you save on your account page | Contract (b) | Until you change them or delete your account |
| Access and payments | Plan, access period, payment method and the reference noted by staff (for example a transaction ID), friend code and referral data. Payment proofs you post in your ticket stay on Discord. | Contract (b); legal obligation (c) for accounting records | Accounting records for the period required by tax law; the rest until you delete your account |
| Tickets and bot messages | Messages in your private ticket (stored by Discord), direct messages from our bot (sign-in links, reminders), the Pilot role on our server | Contract (b) | Ticket channels are deleted when closed; Discord's retention applies to direct messages |
| Device limit and security | Signed-in browsers (browser type, IP address, sign-in and last-use time), audit log of account actions | Legitimate interest (f) in enforcing the device limit and securing the Service | Sessions: up to 30 days; audit log: 12 months |
| PerfDeck Link (optional) | If you install it on your simulator PC: the latest state of the simulated aircraft (aircraft type, weights, fuel, centre of gravity), the commands you send to it from PerfDeck, the time of its last contact, and diagnostic reports only when you choose to send one | Contract (b) | Latest state and commands until replaced or your account is deleted; reports 12 months |
| Contact form | Name, email, message | Legitimate interest (f) / pre-contractual steps (b) | 24 months after the last contact |
We do not use your data for automated decision-making or profiling, we send no marketing and we do not sell personal data.
3. Data in the PerfDeck web app
Your flight data (aircraft, airports, weights, runway corrections, EOSID notes) are stored only in your browser. To compute the figures, the inputs of each calculation (runway, weather, weights, configuration) are sent to our server, processed in memory and not stored. When you press Update, your browser contacts SimBrief directly with the pilot ID from your account; SimBrief's privacy policy applies.
4. Recipients
- Discord Inc. (USA) — sign-in with Discord (OAuth2: we receive your Discord ID, name and the list of servers you are in, used only to check that you are a member of ours and not stored) and our community server, where purchases and support take place. Discord processes your data under its own privacy policy; transfers to the USA rely on the safeguards described there.
- The payment provider you choose (PayPal, Paysafecard, Revolut, your bank or Amazon) processes your payment as an independent controller under its own privacy policy.
- Servereasy S.r.l. (Italy) — hosting of the website, the database and the Discord bot on a virtual server in the EU, as our processor (Art. 28 GDPR).
- Authorities, courts or advisers where required by law or to defend our rights.
5. Cookies
The website uses only strictly necessary cookies (session, form protection, sign-in with Discord) and, when you open an invitation link, a cookie that remembers the code. No analytics, advertising or third-party cookies are used. See the Cookie Policy.
6. Your rights
Under the GDPR you have the right to access, rectify and erase your data, to restrict or object to processing and to data portability. You can download your data and delete your account yourself from the account page. For any other request open a ticket on our Discord server or write to support@example.com (subject "Privacy request"). We answer within one month. You also have the right to lodge a complaint with a supervisory authority, in particular in the EU country where you live; our lead supervisory authority is the Spanish Agencia Española de Protección de Datos (www.aepd.es).
7. Security
We apply appropriate technical and organisational measures: sign-in through Discord (we never receive or store your Discord password), one signed-in device per account, access limited to authorised staff, security headers, rate limiting, audit logging, regular backups and updates.
8. Children
The Service is not intended for children under 16. We do not knowingly collect data from children under 16; if you believe a child has provided us with data, contact us and we will delete it.
9. Changes
We may update this Policy. Material changes are announced on our Discord server or in the Service before they take effect. The current version is always available at this address.
Contact: [COMPANY NAME], [Street, ZIP City, Country] · support@example.com